$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9066b298-522a-482d-91c6-4b7ad82c743d.roa File: 9066b298-522a-482d-91c6-4b7ad82c743d.roa (raw, json) Hash identifier: tg+IznDOB5Fp4IPOfBigUPJZIL32kyFPruYqa7gNzkI= Subject key identifier: 56:FA:25:00:03:9F:C4:E4:11:09:90:D8:AD:93:C5:03:F7:9F:71:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F7BDCADC30A2AB9F3020ABC4ED4A552921AFEF9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9066b298-522a-482d-91c6-4b7ad82c743d.roa Signing time: Sat 08 Nov 2025 00:01:05 +0000 ROA not before: Sat 08 Nov 2025 00:01:05 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7b:dc:ad:c3:0a:2a:b9:f3:02:0a:bc:4e:d4:a5:52:92:1a:fe:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:01:05 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=dfe8f66bc6b40abcfdc13630f251ba8521f7163d33d4344459952800102a7af1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:fc:fe:bf:5b:9b:59:07:33:ea:2a:4a:18: f5:bf:7c:18:52:f6:c3:10:bb:44:cd:15:bd:ea:ff: 11:c5:b7:d8:05:bb:5e:8b:07:f5:d0:e9:d3:1c:38: a3:18:cb:a8:3a:47:89:04:c5:30:29:ac:26:b6:a1: be:bd:64:80:55:e5:d3:fb:60:f7:80:18:6b:b3:a6: ca:95:56:9a:f8:68:41:ce:38:65:4a:cc:36:dd:aa: 2d:21:e7:e3:03:fe:d8:26:6c:ab:db:a4:55:4b:88: de:dd:f4:37:39:1d:a4:b5:b9:9e:e5:e9:71:ed:f4: 3f:ed:19:06:8b:97:f2:e9:0f:b6:d6:b4:09:26:d4: 40:ee:41:94:25:93:b6:d3:ef:b7:cd:80:35:96:38: a8:cf:bb:38:60:af:df:15:ff:2d:02:81:ca:72:47: d3:e1:af:92:7e:7c:da:28:6b:d9:2c:93:45:33:47: d1:d7:b3:56:a6:18:63:76:e4:2c:30:76:00:2b:f8: 61:74:e6:59:25:b2:ad:0e:33:75:b8:4e:84:a9:1d: 63:55:b2:fb:72:93:03:ba:f1:02:21:ca:9e:a8:44: d2:ac:65:fa:f7:55:97:f6:ac:d4:67:16:70:6d:65: fc:d3:ae:1f:4c:de:c4:3d:cb:3b:57:91:43:0d:ec: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:25:00:03:9F:C4:E4:11:09:90:D8:AD:93:C5:03:F7:9F:71:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9066b298-522a-482d-91c6-4b7ad82c743d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:800::/40 Signature Algorithm: sha256WithRSAEncryption 1e:a0:e9:dc:5a:61:f2:bf:be:09:4d:5e:49:1b:99:de:8f:6e: df:6a:d0:57:63:9f:5f:c4:fb:ef:b7:38:d4:0a:27:eb:97:ea: b4:b7:95:a1:43:cc:de:6f:c2:fa:e4:0b:71:c1:3e:67:39:6e: d4:ce:9b:c4:ac:df:b6:a0:a4:35:46:92:fd:2e:10:76:db:b1: ae:a7:68:e5:5a:63:a0:5a:b1:14:69:9e:21:35:54:db:6f:a4: 7a:b3:06:51:34:cf:40:6c:f2:1f:06:5d:df:99:b7:03:b8:ca: ea:c9:da:d7:4b:4e:ce:77:50:64:aa:10:2a:0a:46:19:3c:fd: 40:e0:58:28:0e:27:df:5a:7e:25:dc:a1:7f:ea:df:ad:6a:d0: 50:0f:f8:29:aa:45:12:e4:ec:19:0d:32:a6:d5:50:49:de:93: c8:08:00:c0:c7:b1:f1:e4:e8:98:10:9f:5e:ee:e0:00:22:56: 16:6a:a7:a9:b9:e5:94:a4:61:6b:80:24:ad:36:a2:13:ae:52: d3:05:d8:f8:c9:0d:32:64:b6:38:c2:e7:c1:53:9f:e0:f0:56: 31:22:b4:47:83:b7:fc:80:3a:4a:fb:f4:9b:a8:68:ab:73:bc: 4b:19:24:9e:1f:d2:69:f5:0f:5c:6b:b1:39:e3:10:0f:07:7f: e9:78:27:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT3vcrcMKKrnzAgq8TtSlUpIa/vkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDEwNVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAZGZlOGY2NmJjNmI0MGFiY2ZkYzEz NjMwZjI1MWJhODUyMWY3MTYzZDMzZDQzNDQ0NTk5NTI4MDAxMDJhN2FmMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqj8/r9bm1kHM+oqShj1v3wYUvbD ELtEzRW96v8RxbfYBbteiwf10OnTHDijGMuoOkeJBMUwKawmtqG+vWSAVeXT+2D3 gBhrs6bKlVaa+GhBzjhlSsw23aotIefjA/7YJmyr26RVS4je3fQ3OR2ktbme5elx 7fQ/7RkGi5fy6Q+21rQJJtRA7kGUJZO20++3zYA1ljioz7s4YK/fFf8tAoHKckfT 4a+SfnzaKGvZLJNFM0fR17NWphhjduQsMHYAK/hhdOZZJbKtDjN1uE6EqR1jVbL7 cpMDuvECIcqeqETSrGX691WX9qzUZxZwbWX8064fTN7EPcs7V5FDDey2MQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFb6JQADn8TkEQmQ2K2TxQP3n3GcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwNjZiMjk4LTUyMmEtNDgyZC05MWM2LTRiN2FkODJjNzQzZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYQgwDQYJKoZIhvcNAQELBQADggEBAB6g6dxaYfK/vglNXkkb md6Pbt9q0Fdjn1/E+++3ONQKJ+uX6rS3laFDzN5vwvrkC3HBPmc5btTOm8Ss37ag pDVGkv0uEHbbsa6naOVaY6BasRRpniE1VNtvpHqzBlE0z0Bs8h8GXd+ZtwO4yurJ 2tdLTs53UGSqECoKRhk8/UDgWCgOJ99afiXcoX/q361q0FAP+CmqRRLk7BkNMqbV UEnek8gIAMDHsfHk6JgQn17u4AAiVhZqp6m55ZSkYWuAJK02ohOuUtMF2PjJDTJk tjjC58FTn+DwVjEitEeDt/yAOkr79JuoaKtzvEsZJJ4f0mn1D1xrsTnjEA8Hf+l4 Jyc= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:20 2025 by rpki-client